(12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 
(19) World Intellectual Property 

III! 



Organization 
International Bureau 




(43) International Publication Date 

6 May 2005 (06.05.2005) PCT 



(10) International Publication Number 

WO 2005/040998 Al 



(51) International Patent Classification 7 : 



G06F1/00 



(21) International Application Number: 

PCT/GB2004/003992 

(22) International Filing Date: 

17 September 2004 (17.09.2004) 



(25) Filing Language: 

(26) Publication Language: 



English 
English 



(30) Priority Data: 

0322876.4 30 September 2003 (30.09.2003) GB 

(71) Applicant (for all designated States except US) : BRITISH 
TELECOMMUNICATIONS PUBLIC LIMITED 
COMPANY [GB/GB]; 81 Newgate Street, London, 
Greater London EC1 A 7AJ (GB). 

(72) Inventor; and 

(75) Inventor/Applicant (for US only)-. GHANEA-HER- 
COCK, Robert, Alan [GB/GB]; 149 Dover Road, 
Ipswich, Suffolk IP3 8JJ (GB). 



(74) Agent: NASH, Roger, William; BT Group Legal Intellec- 
tual Property Department, PP C5 A, BT Centre, 8 1 Newgate 
Street, London, Greater London EC1 A 7AJ (GB). 

(81) Designated States (unless otherwise indicated, for every 
kind of national protection available)-. AE, AG, AL, AM, 
AT, AU, AZ, BA, BB, BG, BR, BW, BY, BZ, CA, CH, CN, 
CO, CR, CU, CZ, DE, DK, DM, DZ, EC, EE, EG, ES, FI, 
GB, GD, GE, GH, GM, HR, HU, ID, IL, IN, IS, JP, KE, 
KG, KP, KR, KZ, LC, LK, LR, LS, LT, LU, LV, MA, MD, 
MG, MX, MN, MW, MX, MZ, NA, NI, NO, NZ, OM, PG, 
PH, PL, PT, RO, RU, SC, SD, SE, SG, SK, SL, S Y, TJ, TM, 
TN, TR, TT, TZ, UA, UG, US, UZ, VC, VN, YU, ZA, ZM, 
ZW. 

(84) Designated States ( unless otherwise indicated, for every 
kind of regional protection available)'. ARIPO (BW, GH, 
GM, KE, LS, MW, MZ, NA, SD, SL, SZ, TZ, UG, ZM, 
ZW), Eurasian (AM, AZ, BY, KG, KZ, MD, RU, TJ, TM), 
European (AT, BE, BG, CH, CY, CZ, DE, DK, EE, ES, FI, 
FR, GB, GR, HU, IE, IT, LU, MC, NL, PL, PT, RO, SE, SI, 
SK, TR), OAPI (BF, BJ, CF, CG, CI, CM, GA, GN, GQ, 
GW, ML, MR, NE, SN, TD, TG). 

Published: 

— with international search report 

[ Continued on next page] 



(54) Title: METHOD AND SYSTEM FOR AUTHENTICATING A USER 



00 
OS 

i?5 



22 



21 



\ 




External source of 
authenticate requests 




23 





1 


28 






—t- 


Policy Manager 




Rule Generator 




+ Update 



Data-Preprocessing 



Data-formatting 



(Fuzzy Inferencing) 



25 



26 



(57) Abstract: A method and system of authenticating the identity of a person is disclosed which involves obtaining a value rep- 
resenting an overall degree of trust that the user is who he or she claims to be. A plurality of values are obtained from different 
^ authentication sources. By combining the values using fuzzy inference rules, an authentication system which is more easily adapted 
to new sources of authentication information is provided, in one embodiment the authentication sources are software agent programs. 
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